CARD READER AND METHOD OF CONTROLLING THE CARD READER 
FIELD OF THE INVENTION 

[0001] The present invention relates to a card reader which reads data on a 

magnetic card having a magnetic stripe thereon (hereinafter referred to as "magnetic 
card") and a method of controlling the card reader. More specifically, it relates to a 
card reader that prevents fraudulent use of the data read from the magnetic card and a 
method of controlling the card reader. 

BACKGROUND OF THE INVENTION 

[0002] Among all card readers characterized above, there is card reader (100) 

of the manual type as illustrated in Figure 5. The manual type card reader comprises: 
a frame (102) having a card insertion port (101); a channel (103) continuing in the 
card insertion direction to accommodate insertion and discharge of a magnetic card 
(105); and a magnetic head (104) arranged at a side of channel (103) for detecting 
magnetic card (105). 

[0003] The process steps in which manual card reader (100) reads data from 

magnetic card (105) to send it to a higher level apparatus is described herein with 
reference to the flow chart illustrated in Figure 6. 

[0004 J Insertion of magnetic card (105) is recognized by magnetic head (104) 

when magnetic head (104) reads the data on magnetic stripe (106). While waiting for 
insertion of magnetic card (105), magnetic head (104) reads no data from magnetic 
stripe (106). Therefore, it determines that magnetic card (105) is not considered to be 
inserted to card reader (100) (No for Step 101; step is designated as "S" hereinafter). 

[0005] As magnetic card (105) is inserted into channel (103) through card 

insertion port (101), magnetic head (104) reads data recorded on magnetic stripe (106) 
of magnetic card (105), then insertion of magnetic card (105) is detected (Yes for S 
101). Magnetic head (104) reads data on magnetic stripe (106) (S 102), and edits the 
data it has read (S 103). The data being edited stays until the data transmission to a 
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higher level apparatus (S 104) is authorized. A requirement for authorization of the 
data transmission is detection of magnetic card (105) by rear sensor (107) in card 
reader (100). When the data transmission is authorized (Yes for S 104), the data is 
sent to a higher level apparatus (S 105). 

[0006] In order to accurately transmit the data read from magnetic card (105) 

to a higher level apparatus, the data is held within card reader (100) until the data 
transmission to a higher level apparatus is authorized in this card reader (100). The 
data is deleted when one of the following conditions is met: (i) rear sensor (107) 
detects presence of magnetic card (105), which authorizes data transmission, then the 
data is sent to a higher level apparatus; or (ii) rear sensor (107) detects the magnetic 
card (105) at a given position, and a "delete" command is executed upon detection 
described in section (ii), then the data is sent to a higher level apparatus. 

[0007] Nonetheless, the above card reader (100) of conventional technology 

has a drawback in that it holds the data read from magnetic card (105) internally until 
a higher level apparatus receives the data. The data being held in card reader (100) 
may be used for a fraudulent purpose by a third party, not the holder of magnetic card 
(105). For example, a person may trick rear sensor (107) to fail accurate detection of 
positions of magnetic card (105). Even though a deceptive mechanism is created in 
card reader (100), data on magnetic card (105) can be read and saved as usual when a 
card holder inserts magnetic card (105) to the card reader (100). In this case, since 
rear sensor (107) fails to detect the arrival of magnetic card (105) at a given position, 
authorization does not occur and the data is not sent to a higher level apparatus. The 
data is left in card reader (100) as a result of not being cleared. As soon as the holder 
of magnetic card (105) leaves card reader (100), the person with a malicious intent 
can use the data held in card reader (100). 

[0008] The object of the present invention, therefore, is to provide a card 

reader that can discourage fraudulent use of the data being read from a magnetic card 
and a method of controlling the card reader. 
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SUMMARY OF THE INVENTION 



[0009] To accomplish the object, the present invention provides a card reader 

which takes a magnetic card at a card insertion port into a card reader and reads data 
recorded on the magnetic stripe by a magnetic head. The data read is saved and a 
timer is started and the saved data is made unavailable for reading after a given time 
elapses. 

[00010] The present invention also provides a card reader which takes a card 

having a magnetic stripe at a card insertion port into a card reader and read data 
recorded on the magnetic stripe by a magnetic head wherein the data read is saved and 
edited, then a timer is started. The saved data and/or the edited data are/is made 
available for reading after a given time elapses. 

[00011] The present invention saves the read data and starts a timer. After a 

given time elapses, the present invention prevents the data once read from the 
magnetic stripe from being read again. Alternately, after the read data is saved and 
edited and a timer is started, the present invention makes reading of the data saved 
and/or edited unavailable for reading after a given time elapses. If the data being 
saved and/or edited is not sent to a higher level apparatus after a given time elapses, 
the card reader and the method of controlling the card reader of the present invention 
concludes that there is an abnormal situation and does not allow a third party to read 
the data being saved or edited. Fraudulent use of the data read from the magnetic card 
is thus prevented. 

[00012] After the data is saved or edited in a normal data processing, the data 

can be sent to a higher level apparatus quickly, that is, within a given time during 
which the data can be read to complete transactions requested by the card holder. In 
this way, the possibility of shutting off the card holder from his transactional needs is 
eliminated. 

[00013] In the card reader of the present invention, the data saved and/or the 

data edited are/is deleted after a given time elapses, thereby making the data 
unavailable for reading in the card reader of the present invention. In this case, the 
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data is completely deleted. Therefore, a person with a fraudulent intent can never 
access the data recorded on the third party's magnetic card. 

[00014] The card reader of the present invention further turns off a flag which 

enables reading of the data saved and/or edited after the given time elapses, thereby 
making the data unavailable for reading. Turning off the flag alone prevents the data 
from fraudulent reading of the data on a third party's magnetic card, eliminating the 
need for deletion of data left in the card reader. 

[00015] As described above, when the data being saved or edited is not sent to 

a higher level apparatus after a given time elapses, the card reader and the method of 
controlling the card reader of the present invention concludes that an abnormal 
situation occurred and does not allow a third party to read the data being saved and/or 
edited. For this reason, even though a person with a fraudulent intent introduces a 
deceptive mechanism to a sensor to cause the card reader to retain the data read from 
a magnetic card, the data of interest is deleted after a given time elapses. Fraudulent 
use of the data read from the magnetic card does not happen. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[00016] Figure 1 is a flow chart illustrating operations of the card reader of the 

present invention. 

[00017] Figure 2 is a plan view illustrating the card being inserted into the card 

reader thereof. 

[00018] Figure 3 is a block diagram illustrating the control system of the card 

reader thereof. 

[00019] Figure 4 is a flow chart illustrating operations of the card reader of 

another embodiment of the present invention. 

[00020] Figure 5 is a plan view illustrating the card being inserted into the card 

reader of conventional technology. 

[00021] Figure 6 is a flow chart illustrating operations of the card reader of 

conventional technology. 
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DESCRIPTION OF PREFERRED EMBODIMENT 



[00022] Embodiments of the present invention are described herein with 

reference to the drawings. 

[00023 J Embodiment 1 of card reader (1) of the present invention is illustrated 

in Figures 1-3. Card (4) having a magnetic stripe (3) is inserted into card reader (1) 
through card insertion port (2). Magnetic head (5) reads the data recorded on 
magnetic stripe (3). Card reader (1) saves the data it reads and edits the data it has 
saved, then, it starts a timer such that the data is made unavailable for reading after the 
given time elapses. Herein, the data is deleted after a given time elapses, thereby 
making the data unavailable for reading. 

[00024] Card reader (1) is a manual type card reader which comprises: card 

insertion port (2), a frame (6) having a card insertion port (2) thereon; a channel (7) is 
extended in the card insertion direction. Magnetic card (4) is inserted at card insertion 
port (2) to the stop position to start a transaction and is pulled out when all 
transaction are completed. Magnetic head (5) is arranged at a side of channel (7). 
Card reader (1) is the dip type which reads data from magnetic card (4) at the point of 
insertion and discharge of magnetic card (4). Note that rear sensor (8) is provided at 
the deepest end of frame (6) where the tip of magnetic card (4) reaches when 
magnetic card (4) is fully inserted therein. 

[00025] Card reader (1), as illustrated in Figure 3, further comprises: a data 

input portion (9); a data processing portion (10); a timer portion (1 1); a CPU portion 
(12) that controls the above components; a memory portion (13) that saves a control 
program of CPU portion (12) or provides a similar function; a higher level apparatus 
(14); and a communication controlling portion (15) that transmits data. 

[00026] Data input portion (9) is made up with a data read-out portion (16), 

which is connected to magnetic head (5) to read data from magnetic stripe (3), and 
card position detection portion (17), which is connected to magnetic head (5) and rear 
sensor (8) to detect positions of a card. Data processing portion (10) is constructed 
with a buffer memory (18), which saves the data read from magnetic head (5) without 
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editing it; a data editing portion (19), which rearrange processing sequence of the 
unedited data in accordance with given conditions; and a data storage buffer (20), 
which saves the edited data. Buffer memory (18) and data storage buffer (20) are 
storage media such as RAM. The editing of the read data stored in the buffer memory 
may be done by a specialized processing circuit such as the data editing portion (19) 
or a general processing circuit such as the CPU portion 12. 

[00027] Timer portion (11) starts measuring time after the data is edited by data 

editing portion (19) and the data saved in data storage buffer (20) is deleted after a 
given time elapses. Now, the given time is defined by the time required for a person 
with a fraudulent intent to begin operating card reader (1) as soon as a card holder of 
magnetic card (4) leaves card reader (1). In the embodiment of the present invention, 
the time is set to 5 seconds, for example. 

[00028] Operations of the above card reader (1) are described herein with 

reference to the flow chart illustrated in Figure 1 . In this method of controlling card 
reader (1), the data once read is saved and edited, then, a timer is started. After a 
given time elapses, one can no longer read the edited data. 

[00029] Insertion of magnetic card (4) is detected when magnetic head (5) 

reads data on magnetic stripe (3). While card reader 1 waits for completion of 
insertion of magnetic card (4), magnetic head (5) does not read data, then, card reader 

(I) deems that magnetic card (4) is not inserted (No for SI). 

[00030] When magnetic card (4) is inserted at card insertion portion (2) to 

channel (7), magnetic head (5) reads data recorded on magnetic stripe (3) of magnetic 
card (4) and card position detection portion (17) detects insertion of magnetic card 
(4) (Yes for SI). The data reading portion (16) then reads data on magnetic stripe (3) 
thereof (S2). The data being read is saved in buffer memory (18) (S3), edited by data 
editing portion (19) (S4), and saved in data storage buffer (20), when timer portion 

(II) starts running timer (S5). 

[00031] At this stage, presence of authorization that allows the edited data to be 

sent to higher level apparatus (14) (S6) is checked. A condition for authorization is 
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detection of magnetic card (4) by rear sensor (8). If an authorization is issued and the 
data is ready for transmission (Yes for S6), the data is sent to higher level apparatus 
(14) (S7). 



[00032] If the transmission is not authorized (No for S6), timer portion (1 1) is 

checked to see if the time set in a timer has elapsed (S8). If the given 5 seconds have 
not passed as yet (S8), card reader (1) further waits for authorization thereof (S6). If 
the given 5 seconds have already passed (S8), card reader (1) recognizes an abnormal 
condition, when timer portion (11) deletes the data saved in data storage buffer (20) 
(S9). In this way, after a given time elapses, a person with a fraudulent intention is 
entirely unable to read the data on another's magnetic card (4) being read and left in 
card reader (1). Fraudulent use of the data once read from magnetic card (4) of a third 
party is thus prevented. Deletion of data is reported to higher level apparatus (14) 
(S10). 



[00033] Note that applications of the present invention are not limited to the 

above embodiment of the present invention. A variety of modifications are possible 
as long as the spirit of the present invention remains the same. For example, data is 
deleted after a given time elapses to make the data unavailable for reading in the 
above embodiment. Nonetheless, data can be made unavailable for reading by turning 
off a flag (which enables reading of the data) after a given time elapses. 

[00034] In the above embodiment, it is the data saved in data storage buffer 

(20) that is deleted in (S9) in Figure 1. However, the data saved in buffer memory 
(18) may be deleted together with the data saved in data storage buffer (20) in (S9) 
thereof. This will further enhance preventative effect of the present invention on 
fraudulent use of the data read from magnetic card (4). Alternatively, the data saved 
in buffer memory (18) only may be deleted if the situation allows. 



[00035] A given time for waiting before data transmission is set to 5 seconds in 

the above embodiment. However, it may be 30 seconds for example, as long as the 
time is defined by the time required for a person with a fraudulent intent to begin 
operating card reader (1) as soon as the holder of magnetic card (4) leaves card reader 
(1). The given time for waiting may be provided as a variable factor. 
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[00036] Also, in the above embodiment, it is magnetic head (5) that detects 

insertion of magnetic card (4) into card reader (1). However, a detection means is not 
limited to this. A separate sensor which is dedicated to detect card insertion may be 
adopted. 

[00037] Further, in the above embodiment, card reader (1) is of the dip type. 

However, it may be the swipe type. Also, card reader (1) used in the above 
embodiment is the manual type. Nonetheless, the type is not limited to this and it may 
be the motor driven automatic type. 

[00038] Moreover, in the above embodiment, data processing portion (10) in 

card reader (1) comprises: a data editing portion (19); and data storage buffer (20); 
data saved in buffer memory (18) is edited by data editing portion (19), and then, a 
timer is started intimer portion (1 1). However, the data saved in buffer memory (18) 
does not always need to be edited. In other words, as illustrated in Figure 4, the data 
read from magnetic stripe (3) of magnetic card (4) may be saved in buffer memory 
(18) (S3), and then, a timer in timer portion (1 1) may be started (S5). In this case, the 
data saved in buffer memory (18) is deleted in (S9). Note that when the data saved in 
buffer memory (18) is not edited, data processing portion (10) does not need to have 
data editing portion (19) and data storage buffer (20). 

[00039] The foregoing specific embodiments represent just some of the ways of 

practicing the present invention. Many other embodiments are possible within the 
spirit of the invention. Accordingly, the scope of the invention is not limited to the 
foregoing specification, but instead is given by the appended claims along with their 
full range of equivalents. 
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